Data: synthetic auth+firewall index generated on load (ours, CC0) · demo mode answers Splunk's search REST API from a mock